[dependabot]

Bumps the python-dependencies group with 16 updates:

Package	From	To
pyarrow	25.0.1	26.0.0
python-dotenv	1.2.3	1.2.4
pandera	0.33.1	0.35.0
gcsfs	2026.10.0	2026.10.1
ssb-fagfunksjoner	1.1.8	1.2.1
pandas	3.0.6	3.1.0
google-auth	2.59.1	2.62.0
google-api-core	2.40.0	2.43.2
black	26.5.1	26.10.1
pre-commit	4.6.2	4.7.0
ipykernel	7.3.0	7.4.0
mypy	2.3.1	2.4.1
pytest-mock	3.15.1	3.17.0
ruff	0.16.9	0.17.3
types-requests	2.33.0.20260906	2.33.0.20261030
dapla-toolbelt-metadata	0.19.0	0.15.0

Updates pyarrow from 25.0.1 to 26.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 26.0.0

Release Notes URL: https://arrow.apache.org/release/26.0.0.html

Apache Arrow 26.0.0 RC0

Release Notes: Release Candidate: 26.0.0 RC0

Commits

• 4461671 MINOR: [Release] Update versions for 26.0.0
• 9d03a26 MINOR: [Release] Update .deb/.rpm changelogs for 26.0.0
• 5ce3c95 MINOR: [Release] Update CHANGELOG.md for 26.0.0
• 28e6c67 GH-51687: [C++] Skipt tests that require threads if ARROW_ENABLE_THREADING=OF...
• 12409f8 GH-51682: [CI][C++] Add liburiparser-dev to system dependency image (#51683)
• 1deceed GH-51675: [Python][Packaging] Apply upstream fix to UriParser from vcpkg and ...
• cca44b5 GH-51638: [CI][C++][Parquet] Update expected JSON output in parquet-reader-te...
• 5183e21 GH-46901: [C++][Compute] Add remainder and modulo kernels (#48914)
• f0d043c MINOR: [Docs][C++] Fix doxygenfile path for arrow/flight/transport.h (#51677)
• 17be9c7 GH-51652: [Python] Add NumPy StringDType to Arrow conversion (#51157)
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

• dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
• An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
• dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698

Commits

• a565c2c Bump version: 1.2.3 → 1.2.4
• 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
• f215c02 fix: dotenv get exits 0 for empty string values (#700)
• 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
• e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
• a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
• f5485a6 fix: parse empty unquoted value with inline comment as empty string
• See full diff in compare view

Updates pandera from 0.33.1 to 0.35.0

Release notes

Sourced from pandera's releases.

v0.35.0

⭐️ Highlights

Pandera now supports DataFusion schemas

import pyarrow
from datafusion import SessionContext
import pandera.datafusion as pa
schema = pa.DataFrameSchema(
{
"state": pa.Column(str),
"city": pa.Column(str),
"price": pa.Column(int, pa.Check.in_range(5, 20)),
}
)
ctx = SessionContext()
df = ctx.from_arrow(
pyarrow.table(
{
"state": ["FL", "FL", "CA", "CA"],
"city": ["Orlando", "Miami", "Los Angeles", "San Francisco"],
"price": [8, 12, 10, 16],
}
)
)
schema.validate(df)

And of course the class-based dataframe models as well:

class Schema(pa.DataFrameModel):
    state: str
    city: str
    price: int = pa.Field(in_range={"min_value": 5, "max_value": 20})
Schema.validate(df)

What's Changed

• ci: fix path-filter quantifier so docs-only PRs skip unit tests by @​cosmicbboy in unionai-oss/pandera#2545
• fix: propagate nested Column drop_invalid_rows without mutation by @​cosmicbboy in unionai-oss/pandera#2551
• fix(io): read parametrized polars dtypes back from yaml/json by @​aminmiral in unionai-oss/pandera#2523
• fix(polars,ibis): ignore nulls in unique_values_eq by @​MohammadHijjawi97 in unionai-oss/pandera#2538

... (truncated)

Commits

• 02b375a docs(contributing): fix broken Dataframe schemas examples link (#2587)
• ed3e370 chore: configure Ruff as VS Code formatter (#2588)
• 4efb60d ci: don't run the full test matrix for non-CI files under .github/ (#2589)
• dd6a012 fix: only patch numpy 2 aliases for pyspark < 4 (#2134) (#2590)
• f8b0034 docs(api): drop the stray dataframe_schema param from to_json_schema (#2597)
• 2e16e49 fix(pandas): don't repeat duplicate-label columns when adding missing columns...
• a43a169 fix(datafusion): fix warning lint and backend test matrix (#2606)
• b0a2ad5 Add explicit stacklevel to warnings and enforce with ruff B028 (#2500)
• 9d82ffd docs: advertise DataFusion support in the top-level banner (#2604)
• edb0d8b fix(polars): exclude explicit columns from regex alias selectors (#2343) (#2441)
• Additional commits viewable in compare view

Updates gcsfs from 2026.10.0 to 2026.10.1

Release notes

Sourced from gcsfs's releases.

2026.10.1

Bug Fix

Fixed event-loop mismatch in AdaptiveReadaheadCache after fsspec.asyn.reset_lock() or with a custom loop. When fsspec initializes BackgroundPrefetcher on a loop that differs from gcsfs.loop, GCSFile and ZonalFile now rebind the prefetcher to gcsfs.loop.

Commits

• 22cb947 chore: release 2026.10.1
• e3646f5 fix: bind AdaptiveReadaheadCache prefetcher to gcsfs.loop after reset_lock (#...
• See full diff in compare view

Updates ssb-fagfunksjoner from 1.1.8 to 1.2.1

Release notes

Sourced from ssb-fagfunksjoner's releases.

v1.2.1

Changes

🪲 Fixes

• Statistikkregister bugfixes (#237) @​aecorn

v1.2.0

Changes

💥 Breaking Changes

• ITS NOT CALLED "TEAM" - only "dapla api" - I f-ed up (#236) @​aecorn

🔥 Removals and Deprecations

• ITS NOT CALLED "TEAM" - only "dapla api" - I f-ed up (#236) @​aecorn

🪲 Fixes

• ITS NOT CALLED "TEAM" - only "dapla api" - I f-ed up (#236) @​aecorn

v1.1.9

Changes

🚀 Features

• adding dapla team api functionality (#235) @​aecorn

📦 Dependencies

• Bump SonarSource/sonarqube-scan-action from 8.2.1 to 8.2.2 in the github-action-dependencies group (#233) @​dependabot[bot], @​aecorn
• Bump the workflows-dependencies group in /.github/workflows with 3 updates (#232) @​dependabot[bot], @​aecorn

Commits

• dabadbb Merge pull request #237 from statisticsnorway/statistikkregister_bugfixes
• 4ef884f Bump version from 1.2.0 to 1.2.1
• 9311be4 Use get method for old_subjectcodes with default
• cf1e056 Handle single or multiple contacts in parsing
• c28042a Merge pull request #236 from statisticsnorway/dapla-team-api
• 1daf2d4 fix tests
• b944188 explicit export in init
• 72da305 its not called dapla-team-api, only dapla-api or dapla-ctrl-api
• 904c00a Merge pull request #235 from statisticsnorway/dapla-team-api
• 2b81343 adding dapla team api functionality
• Additional commits viewable in compare view

Updates pandas from 3.0.6 to 3.1.0

Release notes

Sourced from pandas's releases.

pandas 3.1.0

We are pleased to announce the release of pandas 3.1.0. This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

Highlights include:

• New DataFrame.select() and updated DataFrame.filter() method
• Faster pd.read_csv(), with parallel reads of large files

See the detailed release notes for a list of all the changes.

The release can be installed from PyPI:

python -m pip install --upgrade pandas

Or from conda-forge

conda install -c conda-forge pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.1.0rc0

We are pleased to announce a release candidate for pandas 3.1.0.

See the whatsnew for a list of all the changes.

The release can be installed from PyPI:

python -m pip install --upgrade --pre pandas==3.1.0rc0

Or from conda-forge

conda install -c conda-forge/label/pandas_rc pandas==3.1.0rc0

Please report any issues with the release candidate on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• c6f4676 RLS: 3.1.0
• dd69475 Backport PR #71468 on branch 3.1.x (DOC: 3.1 whatsnew: add some structure to ...
• 4ccc19a Backport PR #71465 on branch 3.1.x (DOC: update announce (contributor listing...
• 24dae63 [backport 3.1.x] DOC: cleanup 3.1.0 whatsnew (#71408) (#71466)
• 8519ca6 [backport 3.1.x] CI: temporary pin dateutil to <3 (#71461) (#71464)
• 2126193 Backport PR #71387 on branch 3.1.x (BUG: fix string regex operations with $ e...
• 4700f5d Backport PR #71442 on branch 3.1.x (BUG: parallel read_csv raising released m...
• 08efb14 Backport PR #71456 on branch 3.1.x (TST: Fix test_reduce_array until reduct...
• ee8dcb7 Backport PR #71429 on branch 3.1.x (DOC: add dedicated 3.1 whatsnew section f...
• d93e32c Backport PR #71383 on branch 3.1.x (BUG: fix string regex operations with Pyt...
• Additional commits viewable in compare view

Updates google-auth from 2.59.1 to 2.62.0

Release notes

Sourced from google-auth's releases.

google-auth: v2.62.0

2.62.0 (2026-10-12)

Features

• auth: enable bound ID tokens by default on Cloud Run (#18635) (8b625c4)

google-auth: v2.61.0

2.61.0 (2026-10-07)

Features

• auth: support bound access and ID tokens for GKE (#18594) (9f5fd7b)

google-auth: v2.60.0

2.60.0 (2026-10-02)

Features

• auth: Support sync credentials in AsyncAuthorizedSession (#18542) (3799568)

Commits

• 5deaacb chore(main): release google-auth 2.62.0 (#18637)
• 8b625c4 feat(auth): enable bound ID tokens by default on Cloud Run (#18635)
• 98fc304 feat(dbapi): wire timeout parameter through Connection to execute_sql (#18484)
• 0cabf7c test(spanner): increase stale database cleanup cutoff to 3 hours (#18633)
• ab56473 perf(spanner): prune lock and begin event allocations on single-use snapshots...
• 78b9da2 fix(google-cloud-spanner): do not replay DDL statements on transaction retry ...
• f18a11e feat(db-dtypes): support pandas 3.1 (#18590)
• 590e43d fix(bigquery): accept empty sourceFormat fields (#18472)
• 05b3775 perf(spanner): optimize single-chunk results and single-row lookups (#18602)
• a7678fd fix(spanner): eliminate duplicate metrics capture and measure full streaming ...
• Additional commits viewable in compare view

Updates google-api-core from 2.40.0 to 2.43.2

Release notes

Sourced from google-api-core's releases.

google-api-core: v2.43.2

2.43.2 (2026-10-29)

Bug Fixes

• google-api-core: align HTTP T3 and T4 OpenTelemetry span status and attributes (#18868) (deb2194)
• google-api-core: align OpenTelemetry span names, kinds, and T3 endpoint attributes with spec (#18866) (2a10196)

google-api-core: v2.43.1

2.43.1 (2026-10-28)

Bug Fixes

• google-api-core: remove packages_distributions scan and shorten EOL warning window (#18872) (fa77b42)

google-api-core: v2.43.0

2.43.0 (2026-10-22)

Features

• api_core: support DirectPath over Interconnect with TLS composite credentials and ?force-xds (#18431) (fbd3188)
• observability: suppress redundant gRPC auto-instrumentation spans (#18592) (a597007)

google-api-core: v2.42.0

2.42.0 (2026-10-08)

Features

• observability: implement universal 4-path OpenTelemetry tracing (#18433) (7d18b25)

google-api-core: v2.41.0

2.41.0 (2026-10-02)

Features

• api_core: resumable upload supports request_body in constructor (#18543) (97bc619)
• api-core: support AsyncAuthorizedSession transport for resumable uploads (#18544) (9b96af7)
• auth: Support sync credentials in AsyncAuthorizedSession (#18542) (3799568)

Commits

• a6d7f29 chore: release main (#18891)
• deb2194 fix(google-api-core): align HTTP T3 and T4 OpenTelemetry span status and attr...
• 675349a test(gapic-generator): trigger genuine client-side deadline expiration in Cli...
• a7521b5 feat(google/cloud/designcenter/v1): add google-cloud-designcenter (#18894)
• 2a10196 fix(google-api-core): align OpenTelemetry span names, kinds, and T3 endpoint ...
• 8705243 feat: update API sources and regenerate (#18889)
• 9063dd2 chore: release main (#18886)
• 2080127 test: pin pytest<9.2 in failing handwritten packages (#18883)
• ca24f26 feat(bigquery): skip job creation for ARROW query_and_wait results (#18799)
• 2b00f0c fix(bigquery): format datetime objects with isoformat in CSV dataframe loads ...
• Additional commits viewable in compare view

Updates black from 26.5.1 to 26.10.1

Release notes

Sourced from black's releases.

26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that use the action are encouraged to update to the latest version of Black immediately. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it now only accepts released versions of Black, as it already did for black requirements in dependency lists. Other values, such as URL references, are now rejected. This issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

• Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped in parentheses, which IPython can no longer run; such cells are now left unchanged (#5481)
• Keep repeated lines outside the selected --line-ranges unchanged (#5436)
• Fix --line-ranges formatting lines that follow a statement when formatting joins or re-indents that statement (#5484)
• Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)
• Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto the first two lines of a file (#5487)
• Fix adding an extra trailing blank line inside a multi-line module docstring when its last line is near the line length limit (#5494)

Preview style

• Do not split short expressions on delimiters (such as binary operators, comparisons, or comprehensions) inside brackets when preceded by a standalone comment (#5455)
• Fix the unstable string_processing feature removing backslash-newline sequences from raw strings, which changed their value (#5482)
• Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in assignments (such as annotated assignments or subscript targets) (#5473)
• Parenthesize expressions with parameter comments when they exceed the line length under --preview (#5442)
• Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand side that contains a dictionary, leaving a line over the length limit (#5492)
• Fix the unstable string_processing feature adding a space after * or ** in a PEP 695 type parameter (* Ts = ...) when it splits a string in the parameter's default (#5504)
• Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an earlier bracket split exceeds the line length only due to a trailing comment (#5498)

Configuration

• Add --cache-dir to configure the cache directory from the command line (#5433)
• Don't cache a file as formatted after formatting or checking it with --line-ranges,

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.1

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that use the action are encouraged to update to the latest version of Black immediately. This update is received automatically when using psf/black@stable, and is independent of the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it now only accepts released versions of Black, as it already did for black requirements in dependency lists. Other values, such as URL references, are now rejected. This issue has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

• Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped in parentheses, which IPython can no longer run; such cells are now left unchanged (#5481)
• Keep repeated lines outside the selected --line-ranges unchanged (#5436)
• Fix --line-ranges formatting lines that follow a statement when formatting joins or re-indents that statement (#5484)
• Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)
• Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto the first two lines of a file (#5487)
• Fix adding an extra trailing blank line inside a multi-line module docstring when its last line is near the line length limit (#5494)
• Preserve blank lines between imports and unselected statements when using --line-ranges, and ensure a blank line is added between an unselected import and a newly formatted statement (#5493)
• Keep the parentheses around a walrus that is the only item in a set (for example {(x := f())}) when targeting Python 3.9 or older, since Python 3.8 and 3.9.0 can't parse it without them (#5502)

Preview style

• Do not split short expressions on delimiters (such as binary operators, comparisons, or comprehensions) inside brackets when preceded by a standalone comment (#5455)
• Fix the unstable string_processing feature removing backslash-newline sequences from raw strings, which changed their value (#5482)
• Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in assignments (such as annotated assignments or subscript targets) (#5473)
• Parenthesize expressions with parameter comments when they exceed the line length under --preview (#5442)
• Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand side that contains a dictionary, leaving a line over the length limit (#5492)
• Fix the unstable string_processing feature adding a space after * or ** in a PEP 695 type parameter (* Ts = ...) when it splits a string in the parameter's default (#5504)

... (truncated)

Commits

• 258e7db Prepare release 26.10.1 (#5511)
• ac1f715 Action: validate required-version better (#5510)
• fe241cc Avoid splitting trailers when earlier bracket split exceeds length due to com...
• 4fb2897 Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#5500)
• 6d0f557 Bump actions/download-artifact from 8.0.1 to 8.0.2 (#5501)
• c45f21d Handle PEP 695 type parameter whitespace in whitespace() (#5504)
• 8ec61a7 Skip UTF-8 BOM when reading .gitignore (#5497)
• c9b1148 Fix module docstring last_line_length when docstring ends with newline (#5494)
• eb88358 Parenthesize expressions with parameter comments in preview (#3113) (#5442)
• 939fa93 Keep the parentheses around a right-hand side when a dict value's parentheses...
• Additional commits viewable in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #3773 issue by @​cbirkhold.
  • #3774 PR by @​cbirkhold.

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #3773 issue by @​cbirkhold.
  • #3774 PR by @​cbirkhold.

Commits

• 65bb884 v4.7.0
• 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
• 860d07d don't leak GIT_* env into npm install for language: node
• 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
• 9905e88 use contextlib.chdir
• 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
• 2be1701 remove triple-nested withs for 3.14 coverage
• 4c8d22a py311+
• c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
• f49e251 [pre-commit.ci] pre-commit autoupdate
• Additional commits viewable in compare view

Updates ipykernel from 7.3.0 to 7.4.0

Release notes

Sourced from ipykernel's releases.

v7.4.0

7.4.0

(Full Changelog)

New features added

• Enable setting and resetting a thread-local parent header #1546 (@​jasongrout, @​minrk)

Enhancements made

• Allow async cell to process Comm messages #1565 (@​davidbrochart, @​JohanMabille, @​kylebarron)
• Bump minimum Python to 3.11, update linting, drop dead branches #1553 (@​Carreau, @​minrk)
• Defer the psutil import until it is actually needed #1551 (@​Carreau, @​minrk)
• validate variable names in copyToGlobals debug handler #1537 (@​sahvx655-wq, @​JohanMabille)
• create debugger tmp directory with 0o700 permissions #1530 (@​sahvx655-wq, @​JohanMabille, @​minrk)
• Update the supported_encryption to use a list as per JEP latest state #1528 (@​krassowski, @​Carreau, @​JohanMabille)
• Make psutil optional at runtime #1527 (@​yves-surrel, @​ianthomas23)

Bugs fixed

• Create _control_lock before its users #1568 (@​tovrstra, @​minrk)
• Reply with busy -> error -> idle if subshell unknown #1558 (@​krassowski, @​Carreau, @​JohanMabille)
• Send the shell reply through the ZMQStream instead of raw on its socket #1529 (@​BoykoNeov, @​ZupoLlask, @​claude, @​ianthomas23, @​practicusai, @​thomasjm)
• Enable ProactorEventLoop on windows for ipykernel #1469 (@​NewUserHa, @​BoykoNeov, @​Gravifer, @​ZupoLlask, @​claude, @​ianthomas23)

Maintenance and upkeep improvements

• try to fix publish workflow #1571 (@​minrk)
• chore: update pre-commit hooks #1570 (@​davidbrochart)
• Use dependency groups instead of extras #1563 (@​davidbrochart)
• MAINT: Switch zizmor to the github action #1561 (@​Carreau, @​Yann-P)
• Fix downstream test: install ipykernel from source for jupyter_kernel_test #1560 (@​glaziermag, @​Carreau, @​claude)
• Add Zizmor #1556 (@​Carreau, @​Yann-P)
• [CI] remove type:ignore, likely due to new pyzmq #1552 (@​Carreau, @​minrk)
• Fix typing issue due to new releases #1544 (@​Carreau, @​krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​BoykoNeov (activity) | @​Carreau (activity) | @​davidbrochart (activity) | @​glaziermag (activity) | @​Gravifer (activity) | @​ianthomas23 (activity) | @​jasongrout (activity) | @​JohanMabille (activity) | @​krassowski (activity) | @​kylebarron (activity) | @​minrk (activity) | @​NewUserHa (activity) | @​practicusai (activity) | @​sahvx655-wq (activity) | @​Scott5S (activity) | @​thomasjm (activity) | @​tovrstra (activity) | @​Yann-P (activity) | @​yves-surrel (activity) | @​ZupoLlask (activity)

Changelog

Sourced from ipykernel's changelog.

7.4.0

(Full Changelog)

New features added

• Enable setting and resetting a thread-local parent header #1546 (@​jasongrout, @​minrk)

Enhancements made

• Allow async cell to process Comm messages #1565 (@​davidbrochart, @​JohanMabille, @​kylebarron)
• Bump minimum Python to 3.11, update linting, drop dead branches #1553Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.